chore: add Dependabot updates

[jeffgreendesign]

Summary

• Add weekly Dependabot updates for npm dependencies
• Add weekly Dependabot updates for GitHub Actions

Safety

• Config-only change
• No README or narrative rewrite
• No private data or live integration changes

Verification

• git diff --check

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
commerce-changeset	Ready	Preview, Comment	Jun 8, 2026 3:06am

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 134f6395-44fc-44d7-b161-0a5bbf061097

📥 Commits

Reviewing files that changed from the base of the PR and between 5b7bbd5 and 7878ece.

📒 Files selected for processing (1)

• .github/dependabot.yml

---

Walkthrough

This PR introduces .github/dependabot.yml to automate dependency management. The configuration enables Dependabot version 2 with two ecosystem managers: npm packages and GitHub Actions workflows. Both are set to check for updates weekly from the repository root. For npm, all dependencies are grouped into a single update group to consolidate related updates.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'chore: add Dependabot updates' clearly and concisely summarizes the main change: adding Dependabot configuration for automated dependency updates.
Description check	✅ Passed	The description is directly related to the changeset, detailing the addition of Dependabot configuration for npm and GitHub Actions with clear safety and verification notes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/repo-health-dependabot

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}